Virus Alert

R. Richard

Literotica Guru
Joined
Jul 24, 2003
Posts
10,382
'Here You Have' Virus E-Mail Spreads Online
E-Mail Worm Hits Offices Worldwide

A global e-mail virus spammed inboxes this afternoon, slowing -- and in some cases halting -- work at offices around the world as employees watched their inboxes inexplicably fill with e-mails under the subject line "Here you have." Some workers were forced to go without e-mail altogether, as the flood of spam put their services out of commission.

Organizations including NASA, Comcast, AIG, Disney, Proctor & Gamble, Florida Department of Transportation and Wells Fargo are just a few of the organizations apparently affected by the worm, which appears to have sent out hundreds of thousands, if not millions of e-mails.

When contacted by ABCNews.com, security firm McAfee said it was investigating the attack but confirmed that it had affected corporations around the world. Although McAfee did not disclose how widespread the attack was, around 4 p.m. Thursday afternoon, the subject of the spam e-mail, "Here you have," was the second hottest search on Google trends.

Dmitri Alperovitch, vice president of threat research at McAfee, told ABCNews.com that the company was investigating the attack.

"We do know that it's essentially an e-mail based worm that's propagating that has a link that alleges to be a pdf document that it wants the user to click on," he said. "In reality, it's a piece of malware that's obfuscating as a pdf and it has the capabilities to spread virally once it's installed on your machine."

Later, the company published a report about the virus on its website, saying that the risk for both home and corporate e-mail is "low." McAfee's report also identified the spam as a Trojan and said the origin is unknown.

On its blog, McAfee said that because multiple variants of the worm are spreading, it "may take some time to work through them all to paint a clearer picture."

E-Mail Subject: 'Here You Have.' 'Just For You'
One version of the spam e-mail simply says, "Hello: This is The Document I told you about, you can find it here" and includes a link that appears to be a pdf document.

Another version of the worm includes the subject "Just For you" and says "This is The Free Dowload Sex Movies,you can find it Here."

If a user clicks the link and downloads the virus, it spreads to contacts in that individual's e-mail account and continues to propagate. McAfee also said that it attempts to stop and delete security services. McAfee says it has coverage for at least the main strain of the virus.

If you receive the messages, McAfee says to delete the message without clicking the link and alert your IT office.
Security firm Symantec said the worm appears to be a new malware attack but is similar to the "Anna Kournikova" virus from 2001, which also carried the subject "Here you have." (The virus tricked users into opening an e-mail message supposedly containing a picture of tennis player Anna Kournikova.)

Symantec speculates that the threat -- initially named Trojan.Horse but renamed to W32.Imsolk.A@mm -- originated from a botnet and appears to be hitting "many, many companies indiscriminantly."

"Once the threat copies itself to another machine, if a user even opens the folder that contains the threat on this new machine, this will launch the threat and cause it to spread further through both email and over shared drives," the company wrote in a bulletin.
 
This is a really a bad one! I just got a call from a corporate friend, and she says she's on her way home-- her entire office is now offline. I think there are twenty five-ish people in that office...

For my friends that maintain websites, please take a minute to check out http://www.honeypot.org and think about installing their system. It does seem to drop the spambots in their tracks.
 
Mail Washer is another helpful programme. You get to see the headers before the stuff's on your computer.
Personally, I look at these 'adverts' (Kornivoa, etc) and don't bother with them. If I do not recognise the sender, I dump it.
 
Mail Washer is another helpful programme. You get to see the headers before the stuff's on your computer.
Personally, I look at these 'adverts' (Kornivoa, etc) and don't bother with them. If I do not recognise the sender, I dump it.

The only sensible thing to do.
 
I got hit by a worm that was sending my friend's emails against me, and me against them. It really sucked :(
 
in general, it's good practice to NEVER open any sort of attachment to an e-mail, unless you're sure that the e-mail is from a trusted sender.
 
Back
Top